Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds.EPSS 0.3%May 27, 2026
- Medium5.5Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers a…EPSS 0.3%May 27, 2026
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.EPSS 0.1%May 27, 2026
- Medium4.3Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.EPSS 0.3%May 27, 2026
- Medium4.3Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permissi…EPSS 0.3%May 27, 2026
- High7.5Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to p…EPSS 0.6%May 27, 2026
- High7.5Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control th…EPSS 0.4%May 27, 2026
- High8.8Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as in email content by setting the attribute, without restrictions on the image UR…EPSS 0.5%May 27, 2026
- Medium6.6Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.EPSS 0.4%May 27, 2026
- Medium6.6Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.EPSS 0.4%May 27, 2026
- Medium4.3Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path validation of the workspace directory while uploa…EPSS 0.3%Dec 10, 2025
- Medium4.3Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configur…EPSS 0.2%Dec 10, 2025
- Medium5.4Jenkins Coverage Plugin 2.3054.ve1ff7b_a_a_123b_ and earlier does not validate the configured coverage results ID when creating coverage results, only when submitting…EPSS 0.3%Dec 10, 2025
- Medium5.0Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script genera…EPSS 0.2%Dec 10, 2025
- Low3.5A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.EPSS 0.2%Dec 10, 2025
- Medium4.3Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attac…EPSS 0.2%Dec 10, 2025
- Medium4.3Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be vi…EPSS 0.2%Dec 10, 2025
- Medium4.3A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views.EPSS 0.2%Dec 10, 2025
- High7.5Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenti…EPSS 0.6%Dec 10, 2025
- Critical9.8Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityKEVEPSS 100.0%Jan 24, 2024
- Critical9.9Jenkins Matrix Project Plugin Remote Code Execution VulnerabilityKEVEPSS 97.1%Mar 8, 2019
- Critical9.9Jenkins Script Security Plugin Sandbox Bypass VulnerabilityKEVEPSS 74.4%Mar 8, 2019
- Critical9.8Jenkins Stapler Web Framework Deserialization of Untrusted Data VulnerabilityKEVEPSS 98.3%Dec 10, 2018
- Critical9.8Jenkins Remote Code Execution VulnerabilityKEVEPSS 99.7%Jan 29, 2018
- High7.5Jenkins User Interface (UI) Information Disclosure VulnerabilityKEVEPSS 23.0%Nov 25, 2015
25 records · page 1 of 1
PreviousNext